Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/XAMH6mQExatvC2LMnoXanctLKzE.roa
File: XAMH6mQExatvC2LMnoXanctLKzE.roa (raw, json)
Hash identifier: pCAATiBl9IRxnVx1ZfARnp3JybBqcsAW/QN7pstrTq0=
Subject key identifier: 5C:03:07:EA:64:04:C5:AB:6F:0B:62:CC:9E:85:DA:9D:CB:4B:2B:31
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 0194221F7EE757152D142B117FF94FA214A0
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/XAMH6mQExatvC2LMnoXanctLKzE.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64441
IP address blocks: 91.206.160.0/23 maxlen: 23
194.102.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7e:e7:57:15:2d:14:2b:11:7f:f9:4f:a2:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c0307ea6404c5ab6f0b62cc9e85da9dcb4b2b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:aa:d4:b8:b2:f5:75:4e:05:2b:6f:41:51:
58:37:54:90:f7:70:a7:1f:64:25:f9:41:cd:a8:d7:
16:d5:51:d1:64:cc:97:92:59:ff:b9:d6:40:08:9c:
e8:3a:24:fa:17:c4:c0:94:27:4d:67:80:04:44:7b:
0e:ee:65:eb:a0:e8:8c:26:6a:d4:a6:a8:f7:3d:58:
ad:89:ca:76:cc:63:55:7f:77:f5:b5:49:f6:23:0d:
9b:1c:97:da:e8:df:06:11:c3:3d:33:58:4b:38:20:
fc:f6:31:b6:97:a8:14:06:1c:63:9f:53:ed:fa:d6:
d7:8c:b4:44:e8:5b:0c:ed:2f:75:d3:18:36:4e:16:
1a:f9:67:fb:b7:a3:3d:96:e2:be:15:09:23:23:56:
1b:54:fe:c7:c1:14:28:e3:ed:7a:c3:1d:bf:24:da:
a0:ae:85:cb:e1:17:04:f8:a2:46:0a:d1:c3:43:a4:
c8:86:cd:04:0f:09:47:65:8a:a5:2d:81:fe:ca:38:
c0:c5:c7:9c:a9:de:35:b8:20:d1:a1:97:e3:e8:da:
42:57:19:98:a7:c8:c6:91:62:28:a2:12:f0:3e:f1:
58:34:44:10:db:7f:5f:cd:1c:75:4c:d2:b0:91:68:
64:60:b3:10:d0:a1:6a:52:68:fe:eb:14:c6:5d:99:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:07:EA:64:04:C5:AB:6F:0B:62:CC:9E:85:DA:9D:CB:4B:2B:31
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/XAMH6mQExatvC2LMnoXanctLKzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.160.0/23
194.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2f:03:d9:59:3f:e2:cb:cd:18:19:f1:02:aa:d1:ba:df:92:
47:d6:d9:3f:2f:fa:71:a4:4a:6f:d9:e7:ea:9a:b6:47:07:4e:
1d:19:94:f8:d2:f0:68:05:02:5e:e0:f7:03:e7:e1:c7:5e:73:
a2:90:67:9c:ae:1d:c0:97:b1:a4:d7:fe:f0:9f:17:82:9c:0b:
83:41:32:6b:25:fe:ca:e8:7e:f3:54:fd:4e:72:2c:54:35:a8:
e6:b1:36:f4:c3:c2:19:f3:2e:92:47:61:9e:0f:c9:27:e6:84:
13:0c:b0:72:fb:c2:10:2b:00:e5:20:3b:ab:05:b8:5d:67:a0:
9d:6e:9e:b2:76:79:2a:5c:88:c7:b1:60:ce:bd:60:de:60:76:
3e:12:d4:32:5d:df:84:7e:01:1c:bf:92:99:d3:8d:97:b8:49:
e0:92:13:2d:d8:41:ed:7e:3d:a0:a9:f6:3d:d3:c2:a1:94:b2:
65:a0:3e:c9:a0:7e:0f:ba:3f:23:0d:83:28:7c:6f:f4:f9:9d:
c1:d3:cf:fa:f2:8d:24:2d:73:fa:69:14:d3:12:c2:34:0b:fc:
a2:6c:53:f5:63:8e:6d:c5:28:c0:52:4d:cd:32:ff:38:26:8d:
20:8d:0f:42:9d:80:47:63:47:53:e1:8a:42:c7:01:9e:76:9b:
29:4c:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:33 2025 by rpki-client